FortiGate1 has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between FortiGate1 and FortiGate2 is on UDP port 500. A PC on FortuGate2’s local area network is sending continuous ping requests over the VPN tunnel to a PC of FortiGate1’s local area network. No other traffic is sent over the tunnel.

Which statement is true on this scenario? http://kb.fortinet.com/kb/documentLink.do?externalID=FD35337

The FortiGate is an IPsec VPN hub. A VPN spoke protecting subnet 192.168.222.0/24 has successfully brought up a tunnel with the FortiGate. This remote network is present in the FortiGate routing table as shown in the exhibit.

Which statement is true?

There is an interface-mode IPsec tunnel configured between FortiGate1 and FortiGate2. You want to run OSPF over the IPsec tunnel. On both FortiGates. the IPsec tunnel is based on physical interface port1. Port1 has the default MTU setting on both FortiGate units.
Which statement is true about this scenario?

Which three configuration scenarios will result in an IPsec negotiation failure between two FortiGate devices?
(Choose three.) any previous key. Either enable or disable PFS on both the tunnel peers; otherwise, the LAN-to-LAN (L2L)

Which three statements about throughput on a wireless network are true? (Choose three.) http://www.tp-link.in/faq-499.html

An administrator wants to assign static IP addresses to users connecting tunnel-mode SSL VPN. Each SSL
VPN user must always get the same unique IP address which is never assigned to any other user.
Which solution accomplishes this task?

The exhibit shows an LDAP server configuration in a FortiGate device. The LDAP user, John Smith, has the following LDAP attributes:

John Smith’s LDAP password is ABC123.
Which CLI command should you use to test the LDAP authentication using John Smith’s credentials? https://forum.fortinet.com/tm.aspx?m=119178

Your NOC contracts the security team due to a problem with a new application flow. You are instructed to disable hardware acceleration for the policy shown in the exhibit for troubleshooting purposes.

Which command will disable hardware acceleration for the new application policy?
A)

B)

C)

D)

http://docs.fortinet.com/uploaded/files/1607/fortigate-hardware-accel-50.pdf

Your company uses a cluster of two FortiGate 3600C units in active-passive mode to protect the corporate network. The FortiGate cluster sends its logs to a FortiAnalyzer and you have configured scheduled weekly reports for the Internet bandwidth usage of each corporate VLAN. During a scheduled maintenance window, you make a series of configuration changes. When the next FortiAnalyzer weekly report is generated, you notice that Internet bandwidth usage reported by the FortiAnalyzer is far less than expected.
What is the reason for this discrepancy?

You notice that memory usage is high and FortiGate has entered conserve mode. You want FortiGate’s IPS engine to focus only on exploits and attacks that are applicable to your specific network.
Which two steps would you take to reduce RAM usage without weakening security? (Choose two.)